Exception to domain password policy

M

Michael

We are in the process of enacting a domain password policy
and I need to make sure that the account options setting
in AD Users & Computers will override them. We have a few
applications that will not work if the password is changed.
 
S

Simon Geary

A domain level GPO will override any settings in AD Users & Computers.
For the accounts you don't want to change, remove the 'apply group policy'
permission from them.
 
G

Guest

I am looking for the same solution and have previously applied your suggestion without success

I have set Deny to the 'Apply Group Policy' for that user, and have removed the 'Read' permission

When I run gpresults.exe logged in as that user, the password policy still is in effect

Any ideas?
 
D

David Fisher [MSFT]

Hello Larry.

Password policies are domain-wide and cannot be disabled on a "per user"
basis. All users in a domain must have the same password policy.

Best Regards,
David Fisher
Enterprise Platform Support
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top